diff --git a/docs/sdk/api-mcp.mdx b/docs/sdk/api-mcp.mdx index 86a83ff..b80faf3 100644 --- a/docs/sdk/api-mcp.mdx +++ b/docs/sdk/api-mcp.mdx @@ -34,8 +34,8 @@ themselves), see the ### Search Parameters -The `search_global` and `search_tenant` tools accept the -same parameters: +The `search_global` and `search_tenant` tools accept the following +parameters: Lucene query. @@ -50,6 +50,12 @@ same parameters: List of event types to scope the search. Defaults to all event types. + + Filter results by event severity. Passing an array returns only events whose + severity exactly matches one of the listed values. Allowed values: `info`, + `low`, `medium`, `high`, `critical`. + + Number of results to return. Between `1` and `10`. @@ -58,6 +64,25 @@ same parameters: Opaque pagination cursor from a previous response. +#### Tenant Search Parameters + +In addition to the shared parameters above, `search_tenant` accepts the +following tenant-scoped filters: + + + Filter results to events that carry at least one of the given tenant tags. + + + + If `true`, only return events that have been marked as ignored. `false` has no + effect and behaves the same as omitting it. + + + + If `true`, only return events that have been marked as remediated. `false` has + no effect and behaves the same as omitting it. + + ### Prompt Examples - `What has Flare picked up on our monitored domain scatterholt.com in the last 24 hours?`